EmailAuth is the AI-native email authentication platform. Agentic AI runs DMARC, SPF, DKIM, BIMI and MTA-STS around the clock, and your team approves every change that matters. You choose where it runs and whose AI keys it uses.
Three ways to run EmailAuth
- 1
SaaS
Fully managed by EmailAuth. Live in a day, no infrastructure.
- 2
Your cloud tenancy
Runs inside your own account on AWS, Microsoft Azure, Google Cloud, Oracle Cloud (OCI), IBM Cloud, Alibaba Cloud.
- 3
On-premise and private cloud
Single-click appliance in your data centre or on VMware or OpenStack, including air-gapped.
Supported environments
- Public clouds, in your own tenancy: AWS, Microsoft Azure, Google Cloud, Oracle Cloud (OCI), IBM Cloud, Alibaba Cloud.
- Private cloud: VMware, OpenStack.
- On-premise appliance, including air-gapped networks.
- SaaS, fully managed by EmailAuth.
Bring Your Own Key (BYOK) for AI
Connect your own AI provider so prompts and data stay under your contracts and residency rules: OpenAI, Azure OpenAI, Anthropic, Google Gemini, Self-hosted open models. Air-gapped deployments use self-hosted open models only.
Agentic AI with a human in the loop
- 1
Observe
Agents watch every sender and report. Nothing changes.
- 2
Recommend
Agents propose fixes with the evidence behind each one.
- 3
Approve to act
Agents prepare the change; a named approver signs it off before it goes live.
- 4
Autonomous within guardrails
Agents act inside limits you set, with alerts, audit trail and one-click rollback.
- Policy moves (none, quarantine, reject), SPF changes and new senders go through approval.
- Role-based approvers and a full audit trail of every agent action.
- One-click rollback of any change.
Confidence by design
AI agents never move your domain to p=reject or rewrite SPF without the approval rules you set. Every action is logged and reversible.
Frequently asked questions
Can EmailAuth run on-premise?
Yes. EmailAuth ships as a single-click on-premise appliance, including air-gapped networks, and can also run on VMware or OpenStack private clouds.
Can EmailAuth run in our own cloud account?
Yes, in your own tenancy on AWS, Microsoft Azure, Google Cloud, Oracle Cloud (OCI), IBM Cloud, Alibaba Cloud. The only Tier 1 DMARC OEM available on-premise or in your own tenancy on any cloud.
Can I use my own AI key?
Yes. BYOK supports OpenAI, Azure OpenAI, Anthropic, Google Gemini, Self-hosted open models.
Does the AI change DNS or policy without approval?
Only if you allow it. You choose the autonomy level, from observe-only to autonomous within guardrails, and approvals, audit trail and rollback apply at every level.
Is SaaS still available?
Yes. SaaS is fully managed by EmailAuth and is the fastest way to start.
[ Email security guide ]
[ Talk to an architect ]
On-prem or own-cloud briefing
Walk through deployment in your data centre or your cloud tenancy, with BYOK for AI.